Adware

How to remove “Adware.BetterSurf.B5”?

Malware Removal

The Adware.BetterSurf.B5 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Adware.BetterSurf.B5 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Uses Windows utilities for basic functionality
  • Reads data out of its own binary image
  • Authenticode signature is invalid
  • Behavioural detection: Injection (inter-process)
  • Attempts to create or modify a Browser Helper Object
  • Touches a file containing cookies, possibly for information gathering

How to determine Adware.BetterSurf.B5?


File Info:

name: 96CEBD7B1B0BB6B7C702.mlw
path: /opt/CAPEv2/storage/binaries/88942aa7a6a58de5e57a24f3b75b87a3b3cbd04799d68bf42d3d287a093305d8
crc32: 407FB94A
md5: 96cebd7b1b0bb6b7c702d854418da705
sha1: 0da487196d7334f7ef438efafc3b25a5ab6024a5
sha256: 88942aa7a6a58de5e57a24f3b75b87a3b3cbd04799d68bf42d3d287a093305d8
sha512: b5c375722241ecb0eb22b6053397afa2ee85eb2cb18c7738461c675b9a52618a88de852339b09af3f67c16fd68f8a5303cd3b6e71e080751e1a8a28a851d69ed
ssdeep: 12288:HIkxI0TtG4GjeZHkwuPikQ7lKH5p5H9x1ieZHkwulinQZlKR5pxxoiRI:HIkvtG4GjeZEXi37l6Br1ieZE9iQZl2+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16AD423EB1FE29177E9DAB17F4F30EE6EE2B1B48880D765864F571D693AE22C72510010
sha3_384: 17ac6bf998c7691657d1b14af4b3a41677a345f8c199cb09353bb4d10429a29a03879b3d39e2ac362154d6e0604f84a2
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-12-05 22:50:52

Version Info:

CompanyName: Media Watch
CompanyWebsite:
FileDescription:
FileVersion: 1.1
LegalCopyright:
ProductName: Media Watch home 3795
ProductVersion: 1.1
Translation: 0x0000 0x04e4

Adware.BetterSurf.B5 also known as:

BkavW32.AIDetectMalware
LionicAdware.Win32.BetterSurf.lXj2
Elasticmalicious (high confidence)
DrWebTrojan.Amonetize.10
MicroWorld-eScanGen:Variant.Adware.SwiftBrowse.10
FireEyeGen:Variant.Adware.SwiftBrowse.10
CAT-QuickHealAdware.BetterSurf.B5
SkyhighRDN/Generic PUP.z
ALYacGen:Variant.Adware.SwiftBrowse.10
Cylanceunsafe
VIPREGen:Variant.Adware.SwiftBrowse.10
SangforAdware.Win32.Bettersurf.V27k
K7AntiVirusUnwanted-Program ( 0040f7f51 )
AlibabaAdWare:Win32/Amonetize.7a5c438c
K7GWUnwanted-Program ( 0040f7f51 )
CrowdStrikewin/grayware_confidence_100% (W)
SymantecAdware.WebexpEnhanced
tehtrisGeneric.Malware
ESET-NOD32multiple detections
APEXMalicious
ClamAVWin.Dropper.LokiBot-9938750-0
Kasperskynot-a-virus:AdWare.Win32.BetterSurf.b
BitDefenderGen:Variant.Adware.SwiftBrowse.10
NANO-AntivirusRiskware.Win32.BetterSurf.cvthxc
SUPERAntiSpywareAdware.BetterSurf/Variant
AvastNSIS:Amonetize-G [PUP]
TencentWin32.Adware.Bettersurf.Majl
TACHYONTrojan-Clicker/W32.BetterSurf.649741
EmsisoftApplication.InstallMon (A)
F-SecureAdware.ADWARE/Adware.Gen
TrendMicroTROJ_SPNR.0BCP14
Trapminemalicious.high.ml.score
SophosBetterSurf (PUA)
Ikarusnot-a-virus:AdWare.Win32.BetterSurf
GDataWin32.Adware.Bettersurf.E
JiangminAdWare.Amonetize.arbm
WebrootW32.Adware.Gen
GoogleDetected
AviraADWARE/Adware.Gen7
VaristW32/Medfos.AE.gen!Eldorado
Antiy-AVLTrojan/Win32.Detplock
Kingsoftmalware.kb.a.747
XcitiumApplication.Win32.AdWare.BetterSurf.C@58yosa
ArcabitTrojan.Adware.SwiftBrowse.10 [many]
ViRobotAdware.Bettersurf.649741.AG
ZoneAlarmnot-a-virus:AdWare.Win32.BetterSurf.b
MicrosoftAdware:Win32/BetterSurf
CynetMalicious (score: 100)
AhnLab-V3Adware/Win32.BetterSurf.C233448
McAfeeArtemis!96CEBD7B1B0B
MAXmalware (ai score=99)
VBA32Adware.Amonetize
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/NsisDownloader.A
TrendMicro-HouseCallTROJ_SPNR.0BCP14
RisingPUF.Amonetize!8.C5 (TFE:5:cqV4nwXZiWC)
YandexPUA.BetterSurf!Fy9gOPI/f1c
SentinelOneStatic AI – Suspicious PE
FortinetW32/Amonetize.F!tr
AVGNSIS:Amonetize-G [PUP]
DeepInstinctMALICIOUS

How to remove Adware.BetterSurf.B5?

Adware.BetterSurf.B5 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment